Cloudflare allows editing DNS directly using their API. I was using this feature inside ploi and it is absolute blast because you don't need to login inside CF to change DNS and you can manage it directly from FlyWP dashboard. Same applies to WAF. Their waf feature allows us to setup rules to enhance site security.